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We  describe  resolution  proof  systems  for  several  modal  logics.  First  we  present  the  propo¬ 
sitional  versions  of  the  systems  and  prove  their  completeness.  The  first-order  resolution 
rule  for  classical  logic  is  then  modified  to  handle  quantifiers  directly.  This  new  resolution 
rule  enables  us  to  extend  our  propositional  systems  to  complete  first-order  systems.  The 
systems  for  the  different  modal  logics  are  closely  related. 


1.  INTRODUCTION 

Modal  logics  ([HC])  have  found  a  variety  of  uses  in  Artificial  Intelligence  (e.g.,  [Me]), 
in  Logics  of  Programs  (e.g.,  [P]),  and  in  the  analysis  of  distributed  systems  (e.g.,  [HM]). 
For  such  applications,  natural  and  efficient  automated  proof  systems  are  very  desirable. 
A  variety  of  decision  procedures  have  been  proposed  for  propositional  modal  logics  (e.g., 
[W]).  The  traditional  proof  systems  for  first-order  modal  logics  are  simple;  this  makes 
them  appropriate  for  metamathematical  studies  ([Fil]).  However,  they  often  require  much 
creative  help  from  a  user  or  give  rise  to  long  proofs.  Thus,  they  are  not  suitable  for 
automatic  implementation. 

Classical  clausal  resolution  proofs  ([R])  are  usually  short  and  their  discovery  requires 
little  or  no  human  guidance.  Classical  nonclausal  resolution  ([MWl],  [Mu])  has  the  virtue 
of  added  clarity,  since  formulas  do  not  need  to  be  rephrased  in  unnatural  and  sometimes 
long  clausal  forms. 

Farinas  del  Cerro  ([Fal],  [Fa2],  [Fa3])  proposed  imitating  classical  clausal  resolution 
in  some  modal  logics.  The  proposed  methods  are  rather  attractive,  but  fail  to  treat  the 
full  modal  logics  under  consideration  -  quantifiers  are  not  allowed  in  the  scope  of  modal 
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operators.  Geissler  and  Konolige  ([Ko],  [GK])  attempted  to  solve  this  problem  with  the 
addition  of  a  new  operator,  •,  and  the  introduction  of  “semantic  attachment”  procedures. 

In  this  paper  we  extend  nonclausal  resolution  to  eight  modal  logics  with  the  operators 
□  (“necessarily”)  and  O  (“possibly”).  Our  approach  is  quite  uniform  and  generalizes  to 
a  wide  class  of  modal  logics  in  different  languages.  For  instance,  this  class  includes  logics 
of  knowledge  with  a  knowledge  operator  Ki  for  each  knower.  In  fact,  all  “analytic  logics” 
as  well  as  some  “non-analytic”  ones  (in  the  terminology  of  Fitting  ([Fil]))  are  tractable  by 
these  techniques.  Also,  similar  methods  can  be  used  for  more  complicated  logics,  such  as 
Temporal  Logic  ([AMI],  [AM2]). 

In  the  next  section  we  introduce  some  basic  definitions.  In  section  3  we  present  the 
propositional  proof  systems  for  K,  T,  K4,  S4,  S5,  D,  D4,  and  G;  their  completeness  is 
proved  in  section  4.  These  propositional  modal  systems  are  lifted  to  first-order  modal 
systems  by  adding  some  quantifier  rules  (section  5),  special  auxiliary  rules  (section  6),  and 
an  extended  resolution  rule  (section  7).  Skolemization  rules  (mentioned  in  section  5)  are 
optional.  Section  8  contains  a  simple  example.  The  completeness  of  the  first-order  systems 
is  proved  in  section  9. 


2.  PRELIMINARIES 
a.  Informal  syntax  and  semantics 

The  propositional  modal  language  includes  propositions,  modal  operators,  and  con¬ 
nectives.  All  propositions  are  flexible,  i.e.,  they  may  change  value  from  “world”  to  “world.” 
The  modal  operators  we  consider  axe  the  usual  ones:  □  (“necessarily”)  and  O  (“possi¬ 
bly”).  The  primitive  connectives  are  just  A,  V,  true,  and  false.  It  is  practical  to  regard 
all  other  connectives  as  abbreviations.  Formulas  axe  not  restricted  to  any  special  form 
such  as  clausal  form. 

For  the  first-order  versions,  the  quantifiers  V  and  3,  variables,  and  flexible  predicate 
symbols  axe  added.  It  is  convenient  and  natural  to  include  flexible  function  symbols  and 
world-independent,  rigid  predicate  and  function  symbols  as  well.  Informally,  we  may  say 
that  vaxiables  are  also  rigid.  For  example,  the  formula  3x.[g(x)  V  □p(x)]  expresses  that 
the  same  object  has  property  q  or  necessarily  has  property  p. 

Models  and  and  the  satisfaction  relation  can  be  described  in  terms  of  possible  worlds 
([HC]).  A  model  is  a  tuple  {D,W,wo,R,I),  where 

•  the  domain  D  is  a  non-empty  set  (note  that  we  require  that  there  be 
just  one  domain  rather  than  one  for  each  element  of  W)', 

•  IF  is  a  set  with  a  distinguished  element  wo',  intuitively  W  is  the  set  of 
possible  worlds  and  Wq  the  real  world; 

•  il  is  a  binary  accessibility  relation  on  W ; 
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•  the  interpretation  I  gives  a  meaning  over  D  to  each  predicate  symbol 
and  each  function  symbol  at  each  world  in  W ;  the  meaning  of  rigid 
symbols  is  required  to  be  the  same  at  all  worlds. 

An  assignment  a  is  a  function  from  the  set  of  variables  to  D.  The  satisfaction  relation, 
j=,  is  then  defined  inductively  over  formulas.  In  particular,  the  semantics  of  <>  and  3  are 
given  by: 

{{D,W,wo,R,I),a)  1=  0«  if  for  some  wi  G  W,  wqRwi  and  ({D,W,wi,R,I),a) 
({D,W,wo,R,I),a)  |=3a:.u  if  for  some  d  €  I>,  {{D,W,wo,R,I),a  ■  {x  4- d))  1=  u. 

As  usual,  the  semantics  of  □  and  V  are  dual  to  those  of  <>  and  3,  respectively,  and  validity 
is  defined  as  the  dual  of  satisfiability.  Free  variables  are  implicitly  universally  quantified: 
u  is  valid  exactly  when  Va:.it  is  valid. 

The  different  logics  are  characterized  by  properties  of  the  accessibility  relation  R: 

K:  R  does  not  need  to  satisfy  any  special  conditions. 

T:  R  is  reflexive. 

K4:  R  is  transitive. 

S4:  R  is  reflexive  and  transitive. 

S5:  R  is  reflexive,  symmetric,  and  transitive. 

D:  il  is  serial  (i.e.,  there  is  some  accessible  world  from  every  world). 

D4:  R  is  serial  and  transitive. 

G:  R~^  is  transitive  and  well-founded, 
b.  Proofs  and  rules 

h  w  denotes  that  the  formula  w  can  be  proved  by  resolution,  that  is,  that  there  is  a 
sequence  of  formulas  Soy  •  •  •  j  Sn  such  that  So  —  Sn  =  false,  and  Si+i  is  obtained  from 
Si  by  an  application  of  a  rule.  We  refer  to  So,  •  •  • ,  Sn  as  a  proof  of  w  or  a  refutation  of 

-iW. 

Our  proof  systems  include  two  kinds  of  rules:  simplification  rules  and  deduction  rules. 
•  The  simplification  rules  have  the  form 

Suppose  the  formulas  ui, . . . ,  Um  occur  in  some  conjunction  in  Si,  in  any  order. 
Then  we  delete  an  occurrence  of  each  of  them  and  add  the  derived  formula  v  to 
the  conjuction. 
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Example: 


The  rule  u,  -<u  false  applied  to 
Si  :  {q  V  0(-'P  A  5  A  p)) 
yields 

Si+i  :  {q  V  0{q  A  false)).  | 


•  The  deduction  rules  have  the  form 

Suppose  the  formulas  wi, . . .  ,Um  occur  in  some  conjunction  in  in  any  order. 
Then  the  derived  formula  v  is  added  to  that  conjunction. 

Unlike  simplification  rules,  deduction  rules  do  not  discard  the  premises  iti, . . . ,  u„i. 
Sometimes,  however,  we  may  use  the  weakening  rule  (defined  in  section  3)  to  dis¬ 
card  ui, . . .  ,Um  immediately  after  applying  a  deduction  rule. 

Example: 

The  rule  Qu,  Ov  i— 0(tt  A  v)  applied  to 
Si  :  9  V  [O  g  A  r  A  □  p] 
yields 

:  gVfOgArADpA  0(p  A  q)].  | 

An  occurrence  of  a  subformula  has  positive  polarity  in  a  formula  if  it  is  in  the  scope 
of  an  even  number  of  explicit  or  implicit  -•’s.  It  has  negative  polarity  if  it  is  in  the  scope 
of  an  odd  number  of  -I’s.  For  instance,  Dp  occurs  with  positive  polarity  and  false  occurs 
with  negative  polarity  in  O  ->{false  V  Dp). 

We  use  the  following  polarity  restriction  to  reduce  the  proof  search  space: 

Rules  are  applied  only  to  positive  occurrences  of  ui, . . . ,  Um- 

c.  Soundness 

For  our  proof  notion  to  be  meaningful,  we  require  that  rules  be  sound,  i.e.,  that  they 
maintain  satisfiability:  if  Si  is  satisfiable  then  Si+i  is  satisfiable  as  well. 

We  say  that  u  entails  v  (and  denote  it  u  <->  u)  if  (u  D  v)  is  valid.  The  following 
observation  is  often  helpful  in  soundness  arguments:  a  formula  gets  “truer”  as  its  positive 
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subformiilas  get  “truer”  and  as  its  negative  subformulas  get  “falser.”  More  precisely,  we 
can  prove: 

Lemma  (Monotonicity  of  entailment): 

For  all  u  and  u,  if  «  u  and 

w'  is  the  result  of  replacing  one  positive  occurrence  of  u  by  u  in  ty,  or 
w’  is  the  result  of  replacing  one  negative  occurrence  of  u  by  u  in  w, 
then  w  w'. 

Proof  sketch:  The  lemma  is  proved  by  complete  induction  on  pairs  of  formulas,  with  the 
order  -<  defined  by:  {w,w')  -<  {z,z')  if  w  and  w'  are  proper  subformulas  of  ^  and  z', 
respectively,  or  of  z'  and  z,  respectively.  | 

Suppose  that  for  any  Si  and  any  Si+i  obtained  from  Si  by  applying  a  given  rule  we 
have  Si  Si+i.  Then  soundness  is  clearly  guaranteed  for  the  rule  tmder  consideration. 
Consequently,  we  can  use  the  lemma  to  conclude  that  simplification  rules  are  sound  if 
V  {ui  A  ...  A  Urn)  for  negative  occurrences  of  ui, . .  .,«„»•  For  positive  occurrences, 
it  suffices  that  (ui  A  ...  A  «m)  i’-  The  entailment  (ui  A  ...  A  Um)  v  holds  for 

all  the  simplification  rules  we  will  present,  except  for  the  skolemization  rules.  With  the 
polarity  restriction,  this  guarantees  the  soundness  of  all  the  simplification  rules  except  the 
skolemization  rules.  We  prove  the  soundness  of  the  skolemization  rules  with  a  different 
method. 

Similarly,  deduction  rules  are  always  sound  for  negative  occurrences  of  ui,...,Um 
(since  the  given  formulas  ui,...,Um  are  kept);  for  positive  occurrences,  («i  A . . .  Aum)  v 
suffices.  The  entailment  («i  A. . .  A«m)  v  holds  for  all  the  deduction  rules  we  will  present. 
This  guarantees  the  soundness  of  deduction  rules,  with  no  need  for  polarity  arguments. 


3.  PROPOSITIONAL  SYSTEMS 

a.  Simplification  rules 

•  true-false  simplification  rules: 

These  are  the  regular  true-false  simplification  rules,  such  as 
false  V «  ^  false  and  false,  u  false, 
and  the  rule 

^  false  false. 

•  Negation  rules: 

-I  Du  “>0^  □"'U, 

-i(«  A  u)  =>■  {-'U  V  -lu),  -‘(u  V  v)  {-'U  A  ~'v),  =>  u. 
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•  Weakening  rule: 


u,  V  u. 

The  weakening  rule  lets  us  discard  any  conjunct  v  that  we  regard  as  no  longer 
useful. 

•  Distribution  rule: 

u,  Ui  V  . . .  V  ujfc  ^  (u  A  Ui)  V  . . .  V  (u  A  Vk). 


b.  The  resolution  rule 

We  write  u{v)  to  indicate  that  v  occurs  in  u,  and  then  u{w)  denotes  the  result  of 
replacing  exactly  one  occurrence  of  u  by  «;  in  u.  Similarly,  m[u]  indicates  that  if  v  occurs 
in  u  then  u[to]  denotes  the  result  of  replacing  all  occurrences  of  u  by  w  in  u. 

The  nonclausal  resolution  rule  for  classical  propositional  logic  is: 

A{u,...,u),  B{u,...,u)  I-+  A{true)  y  B  {false). 

That  is,  if  the  formulas  A(u, ...,«)  and  B{u, ...,«)  have  a  common  subformula  u,  then 
we  can  derive  the  resolvent  A{true)  V  B{false).  This  is  obtained  by  substituting  true  for 
certain  (one  or  more)  occurrences  of  u  in  A{u, . . . ,  it),  and  false  for  certain  occurrences  of 
u  in  B{u,. ..  ,u),  and  taking  the  disjunction  of  the  results. 

In  propositional  modal  logics,  this  rule  is  not  sound.  For  instance,  consider  the  formula 
(u  A  O  -ut);  it  is  satisfied  by  any  model  where  u  holds  in  the  real  world  and  fails  in  some 
possible  world.  We  cannot  soundly  deduce  (u  A  O  A  (O  -^true  V  false)),  as  the  rule 
would  suggest,  since  this  formula  is  unsatisfiable.  The  problem  is  that  while  u  occurs  in 
both  <>  -'U  and  u,  it  does  not  need  to  have  the  same  truth  value  in  all  contexts.  Intuitively, 
different  occurrences  of  it  may  refer  to  u  at  different  worlds. 

The  resolution  rule  is  sound  in  propositional  modal  logics  under  the  following  same- 
world  restriction: 

The  occurrences  of  it  in  A  or  B  that  are  replaced  by  true  or  false,  respectively,  are 
not  in  the  scope  of  any  □  or  O  in  A  or  B. 

Informally,  this  imposes  that  all  the  occurrences  of  it  under  consideration  are  evaluated  in 
the  same  world. 

c.  Modality  rules 

These  rules  deal  with  formulas  in  the  scope  of  modal  operators.  For  each  modal  logic 
there  is  a  set  of  modality  rules: 
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•  K: 

0«,  Ov  0(«  A  u). 

•  T: 


□  «,  Ow  1-^  0(t*  A  u),  □«  1-^  u. 


•  K4: 

□  it,  Ow  t-4  0(«  A  u),  □«,<>«  0(n«Ai;). 

•  S4: 

□  «,  Ow  *-♦  0(n«Ai;),  □«  K-4^  It. 

•  S5: 

□  it,  Ow  >->•  0{[3uAv),  □«!->■«, 

C>«,  Ov  i->  0(0 «  A  u).  It  1-^  0«* 

•  D: 

□  u,  O  V  y-*  0(w  A  v),  i-»’  O  true. 


•  D4: 


•  G: 


□  it,  Ov  !->■  0(ti  A  v),  □«,  Ov  0(^«Au), 


O  true. 


□  it,  Ow  y-^  0(t«  A  □  u  A  V  A -1  O  w). 


4.  COMPLETENESS  FOR  PROPOSITIONAL  SYSTEMS 

Theorem:  The  resolution  systems  for  propositional  K,  T,  K4,  S4,  S5,  D,  D4,  and  G  are 
complete  for  the  corresponding  classes  of  models. 

Proof  sketch:  We  exploit  some  known  abstract  characterizations  of  completeness  for  these 
logics.  Specifically,  model  existence  lemmas  (stated  in  terms  of  consistency  properties) 
([Fil])  turn  out  to  provide  simple  and  uniform  proofs  for  all  the  systems.  A  consistency 
property  is  a  syntactic  property  of  sets  of  sentences  that  satisfies  certain  conditions  de¬ 
pending  on  the  logic.  Typically,  consistency  properties  have  the  form  “is  not  refutable 
(in  a  given  proof  system).”  Model  existence  lemmas  guarantee  that  if  a  set  of  sentences 
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satisfies  a  consistency  property  then  all  the  sentences  in  the  set  are  satisfiable  (in  fact,  all 
the  sentences  are  simultaneously  satisfiable  in  some  logics). 

We  give  a  proof  sketch  for  K  and  point  out  where  it  should  be  modified  to  apply  to 
the  other  systems.  Consider  restricting  the  proof  system  for  K  so  that  negation  rules  are 
applied  as  early  as  possible.  It  suffices  to  show  that  the  restricted  system  is  complete. 

We  say  that  a  set  S  of  sentences  is  admissible  (for  K)  if  no  finite  conjunction  of  mem¬ 
bers  of  S  can  be  refuted  (in  the  resolution  system  for  K).  More  precisely,  S  is  admissible  if 
for  all  distinct  wi,...  ,Wk  €  S  there  is  a  permutation  tt  :  {1, . . . ,  fc}  — >  {1, . . . ,  fc}  such  that 
^7r(i)  A  ...  A  tOn-(jfc)  cannot  be  refuted  (or,  as  we  often  say  for  simplicity,  “wi, . . .  ,Wk  €  S 
cannot  be  refuted”).  We  show  that  admissible  is  a  consistency  property  for  K.  To  this  end 
we  check  that  admissible  satisfies  the  conditions  in  the  definition  of  consistency  property 
for  K: 

if  S  is  admissible  and  =  {n|  □  u  6  5}  U  {“>14 H  €  S}  then 

1)  S'  contains  no  proposition  and  its  negation;  false  ^  S,  -itrue  ^  S; 

2)  if  (u  A  u)  6  S  then  S  U  {«,  u}  is  admissible; 

3)  if  ->(«  V  v)  £  S  then  5  U  {->u,  -lu}  is  admissible; 

4)  if  (u  V  v)  e  S  then  S  U  {«}  is  admissible  or  S  U  {v}  is  admissible; 

5)  if  -i(u  A  u)  G  S  then  S  U  {~'u}  is  admissible  or  S  U  {">«}  is  admissible; 

6)  if  O  u  G  S  then  S^  U  {u}  is  admissible; 

7) if->nttGS  then  S^  U  is  admissible. 

Thus,  admissible  is  a  consistency  property  for  K.  Hence,  by  the  model-existence  lemma 
for  K,  if  S  is  admissible  then  each  member  of  S  is  satisfiable.  It  follows  (taking  S  —  {u}) 
that  if  u  cannot  be  refuted  then  u  is  satisfiable.  Therefore,  the  propositional  proof  system 
for  K  is  complete. 

The  completeness  arguments  for  the  other  logics  only  differ  from  the  one  for  K  in  the 
definition  of  consistency  property  that  admissible  needs  to  satisfy.  | 


5.  QUANTIFIER  RULES 


Starting  in  this  section,  we  consider  the  extension  of  the  resolution  systems  to  first- 
order  modal  logics.  The  propositional  language  is  extended  with  quantifiers,  variables, 
predicate  symbols,  and  function  symbols.  The  definition  of  models  imposes  that  the  Baxcan 
formula  (Vx.  □u(a;))  D  (□Vx.u(a;))  and  its  converse  (□Vx.«(a:))  D  (Vz.  Ou(x))  are 
theorems  of  the  first-order  systems. 

We  first  give  four  definitions: 

•  An  occurrence  of  a  quantifier  Q'^  is  of  universal  force  if  it  is  either  a  universal 
quantifier  V  and  has  positive  polarity  or  an  existential  quantifier  3  and  has  nega¬ 
tive  polarity.  An  occurrence  of  a  quantifier  is  of  existential  force  if  it  is  either 
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a  universal  quantifier  V  and  has  negative  polarity  or  an  existential  quantifier  3 
and  has  positive  polarity. 

•  An  occurrence  of  a  modal  operator  M°  is  of  necessary  force  if  it  is  either  □  and 
has  positive  polarity  or  O  and  has  negative  polarity.  An  occurrence  of  a  modal 
operator  is  of  possible  force  if  it  is  either  □  and  has  negative  polarity  or  O 
and  has  positive  polarity. 

This  section  discusses  skolemization  and  gives  some  skolemization  rules.  Completeness 
of  the  systems  does  not  depend  on  the  inclusion  of  the  skolemization  rules,  but  the  rules 
may  sometimes  give  rise  to  short-cuts  in  proofs.  In  general,  we  do  not  rely  on  skolemization 
to  eliminate  quantifiers.  Instead,  we  describe  some  rules  to  move  quantifiers;  we  manipulate 
formulas  with  quantifiers,  and,  therefore,  the  resolution  rule  presented  in  the  next  section 
takes  quantifiers  into  account. 

a.  Skolemization 

In  classical  logic,  all  quantifiers  can  be  eliminated  by  applications  of  skolemization 
rules.  This  is  elegant  for  quantifiers  of  both  tmiversal  and  existential  force,  and  very 
practical  for  quantifiers  of  existential  force.  The  classical  skolemization  rule  for  eliminating 
quantifiers  of  existential  force  is: 

3x  .u[3:]  u  ^f  (3:1 ,  . . . ,  3:^)]  > 

where  /  is  a  new  rigid  function  symbol  and  x,  zi , . . . ,  are  all  the  free  variables  in  u. 

In  modal  logics,  this  rule  is  sound  as  long  as  «  is  not  in  the  scope  of  any  □  or  O- 
Unfortunately,  this  rule  is  not  sound  in  general.  For  instance,  consider  the  formula 

(Vx.  Op(x))  A  (□  3t/.->p(y)), 

where  p  is  a  flexible  predicate  symbol.  The  formula  is  satisfied  by  the  model  M  with 
I>  =  {0,1},  TF  =  {0,1},  i«o=0,  R  =  where  p  holds  for  0  only  in  the  real  world  and 
p  fails  for  1  only  in  the  real  world.  The  rule  replaces  y  by  a  new  rigid  constant  symbol  a, 
yielding  the  formula 

(Vx.  Op(x))  A  (□->?(«)), 

which  is  unsatisfiable.  Notice  that  the  new  formula  states  that  there  is  an  element  in  the 
domain  that  has  the  property  ->p  in  all  possible  worlds.  The  original  sentence,  on  the  other 
hand,  only  claimed  that  in  each  possible  world  there  was  some  element  with  property  ->p. 
Therefore,  the  classical  rule  does  not  capture  implicit  dependencies  on  worlds. 

A  variant  of  the  rule  with  flexible  skolem  symbols  does  capture  implicit  dependencies 
on  worlds  and  soundly  eliminates  some  quantifiers  of  existential  force  in  the  scope  of  modal 
operators.  Consider,  for  instance,  the  formula  □  3x  p(x).  If  □  3x.p(x)  holds  then  in  each 
world  there  must  be  some  element  with  property  p.  In  each  world,  denote  this  element  by 
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a.  Thus,  we  may  derive  that  for  a  new  flexible  constant  symbol  a,  □  p{a)  holds.  More  gen¬ 
erally,  flexible  function  symbols  axe  introduced  when  free  variables  appear.  For  instance, 
assume  □  3x.p(x,  y)  holds.  Then,  for  a  new  flexible  function  symbol  /,  □p(/(y),  y)  holds. 
This  resembles  the  classical  method  to  eliminate  quantifiers  of  existential  force,  with  the 
exception  that  now  a  flexible  function  symbol  is  introduced. 

We  obtain  a  flexible  skolemizaiion  rule  of  the  same  form  as  the  classical  skolemization 

rule: 

3a:.u[«]  ^  u[/(xi,  .  . .  ,x„)], 

where  /  is  a  new  flexible  function  symbol,  x,  xi ,  . . . ,  x„  are  all  the  free  variables  in  u,  and 
X  does  not  occur  in  the  scope  of  any  modal  operator  in  u. 

Proposition  (Soundness  of  flexible  skolemization): 

If  u(3x.«[x])  is  satisfiable,  /  is  a  new  flexible  function  symbol,  x,xi,. . .  ,x„ 
are  all  the  free  variables  in  u,  x  does  not  occur  in  the  scope  of  any  modal 
operator  in  u,  and  3x.«[x]  occurs  positively  in  v, 
then  v{u[f(xi,  . . .  ,«n)])  is  also  satisfiable. 

The  rule  is  not  always  satisfactory  when  x  occurs  in  the  scope  of  modal  operators  in 
u.  For  instance,  the  formula 

□  3x.(p(x)  A  ^p{x)) 

yields 

□  (p(a)  A  Op(a)) 

for  a  flexible  constant  symbol  a.  The  original  formula  is  stronger  than  the  one  we  deduce: 
the  original  formula  asserts  that  for  each  world  the  same  x  satisfies  p(x)  in  the  real  world 
and  in  some  possible  world.  On  the  other  hand,  since  a  is  world-dependent,  the  formula 
□  (p(a)  A  Op(a))  does  not  guarantee  that  the  same  element  of  the  domain  has  property 
p  in  the  real  world  and  in  some  possible  world. 

Instead,  we  could  deduce  the  formula 

□  Vx.  [x  =  a  D  (p(®)  A  O  5(a:))] . 

This  formula  is  as  strong  as  the  original  one.  Note  that  it  involves  a  V  instead  of  a  3. 

This  suggests  how  to  ehminate  all  quantifiers  of  existential  force.  The  price  paid  is  that 
the  deduced  formulas  involve  some  new  equations  and  some  new  quantifiers  of  universal 
force.  The  general  rule  is 

3x.U  ^  Vx.[x  =  /(xi,  .  .  .  ,Xn)  D  «], 

where  /  is  a  new  flexible  function  symbol  and  x,  xi ,  . . . ,  x„  are  all  the  free  variables  in  u. 

Proposition  (Soundness  of  generalized  flexible  skolemization): 

If  v{3x.u)  is  satisfiable,  /  is  a  new  flexible  function  symbol,  x,  Xi , . . . ,  x„  axe 
all  the  free  variables  in  u,  and  3x.u  occurs  positively  in  v, 
then  t;(Vx.(x  =  /(xi,  . . .  ,x„)  D  u))  is  also  satisfiable. 
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b.  Quantifier  extraction  rules 

The  quantifier  extraction  rules  move  quantifiers  to  the  outside  of  formulas.  We  can 
always  extract  quantifiers  of  universal  force: 

u{Q'^x.v[x])  =>  Va:'.it(u[x']), 

where  x'  is  a  new  variable.  {Q'^  is  V  or  3,  whichever  is  of  universal  force  in  the  context 
under  consideration.) 

Proposition  (Soundness  of  rule): 

Sometimes  we  can  extract  quantifiers  of  existential  force  in  a  similar  way: 
u{Q^x.v{x])  3a:'.«(v[a:']), 

where  x'  is  a  new  variable.  The  rule  is  restricted  so  that  dependencies  on  other  variables  and 
implicit  dependencies  on  worlds  are  not  overlooked:  the  replaced  occurrence  of  Q^x.v[x] 
should  not  occur  in  the  scope  of  any  quantifier  of  universal  force  or  modal  operator  of 
necessary  force  in  u. 

Proposition  (Soundness  of  rule): 

If  the  replaced  occurrence  of  Q^x.v[x]  is  not  in  the  scope  of  any  quantifier  of 
universal  force  or  modal  operator  of  necessary  force  in  u, 
then  «(Q^a:.u[a:])  3a:'.ti(u[®']). 

6.  AUXILIARY  RULES 

a.  Rigid  symbols  and  the  frame  rules 

It  is  convenient  to  include  rigid  symbols  for  world-independent  functions  and  predi¬ 
cates  in  the  first-order  modal  language.  The  frame  rules  refiect  the  fact  that  the  meanings 
of  these  symbols  do  not  depend  on  the  world  where  they  are  evaluated: 

if  u  is  a  formula  with  no  occurrences  of  flexible  symbols,  then 
^  u  and  it  i-^  Ow- 

For  instance,  if  p  is  a  rigid  proposition  symbol,  then  O  p  can  yield  p,  and  then  □  p. 

b.  Equality 

As  in  classical  logic,  we  can  add  axioms  for  the  equality  symbol.  Alternatively,  we 
can  include  an  extension  of  paramodulation  or  E-resolution  (see  [MW2]). 
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c.  The  cut  rule 

The  cut  rule  is 

u  V  ->M. 

Note  that  the  cut  rule  requires  heuristics  to  choose  u.  This  may  be  impractical  in  fully 
automatic  systems.  On  the  other  hand,  the  cut  rule  is  quite  convenient  in  interactive 
settings,  where  a  user  may  suggest  appropriate  u’s  to  obtain  shorter  proofs. 

This  rule  is  not  essential  for  completeness  for  the  propositional  modal  systems,  but 
it  is  essential  in  the  first-order  systems.  Other  first-order  modal  systems  include  similar 
devices.  In  fact,  there  exists  proof-theoretic  evidence  that  some  rule  like  the  cut  rule  is 
necessary  for  the  logics  in  question  ([Fil]). 


7.  THE  RESOLUTION  RULE 


In  subsections  a,  b,  and  c  we  describe  a  unification  algorithm  and  a  resolution  rule  for 
first-order  modal  logics.  For  the  sake  of  simplicity,  the  language  is  temporarily  restricted 
not  to  contain  flexible  function  symbols.  In  subsection  d  this  restriction  is  abandoned. 

a.  Unification 

We  extend  the  classical  unification  algorithm  to  handle  formulas  with  modal  operators 
and  quantifiers.  Suppose  we  have  one  of  the  usual  recursive  definitions  of  the  function  uni¬ 
fier  to  compute  most-general  unifiers  of  classical  quantifier-free  expressions.  Two  clauses 
are  added  to  the  recursive  definition,  one  for  modal  operators  and  one  for  quantifiers. 

•  Modality  extension:  Let  M  be  a  modal  operator. 

unifieriMuu  . . .  is  . “»)  »  “  '”sts 

l^fail  otherwise 

In  other  words,  Q  and  O  are  treated  just  like  unary  connectives  as  far  as  unifi¬ 
cation  is  concerned. 


•  Quantifier  extension:  Let  Q  be  a  quantifier  and  x'  a  new  variable. 

unifier{Qxi.ui[xi],  .  .  .  ■,Qxm-Um[xm]) 

funifier{ui[x']^  . . . ,  Um[x'Y)  if  it  exists  and  does  not  bind  x' 
fail  otherwise 


For  instance,  Vx.p{x)  and  Vy.p(y)  unify  because  p{x')  unifies  with  itself  and  the 
unifier  (the  empty  substitution)  does  not  bind  x' .  On  the  other  hand,  Vx.p(a) 
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and  Vy.p(y)  do  not  unify,  since  the  most-general  unifier  of  p(a)  and  p{x')  binds 
x'  to  a.  The  formulas  \/x.p{x)  and  p(y)  do  not  unify:  the  main  operator  of  the 
latter  formula  is  not  a  V. 

These  additions  to  the  recursive  definition  of  unifier  are  simple  enough  that  most- 
general  unifiers  can  still  be  computed  when  unifiers  exist  at  all. 

b.  The  resolution  rule 

The  classical  nonclausal  resolution  rule  can  be  written 

A{vi,  . . .  ,Un),  . . .  ,Um)  A0{true)  V  B0{false) 

where  ^  is  a  most-general  unifier  of  ,  . . .  ,Vm  and  replaces  only  variables  that  are  (im¬ 
plicitly)  universally  quantified  ([MWl]).  As  might  be  expected,  the  classical  rule  is  not 
sound  for  formulas  with  quantifiers,  modal  operators,  and  flexible  symbols. 

Since  we  do  not  rely  on  skolemization  and  the  quantifier  extraction  rules  only  shift 
quantifiers  outwards,  the  modal  nonclausal  resolution  rule  should  handle  quantifiers  in 
front  of  A  and  B.  Also,  the  conclusion  of  the  resolution  rule,  A6{irue)  V  B6(Jahe),  may  be 
preceded  by  some  quantifiers  (obtained  by  mixing  those  in  front  of  A  and  B).  Moreover, 
the  formulas  A,  B,  and  A9{true)  V  B0{false)  may  contain  quantifiers.  Some  restrictions 
guarantee  that  the  presence  of  quantifiers  does  not  make  the  rule  unsound.  Other  restric¬ 
tions  deal  with  flexible  symbols  and  modal  operators. 

The  rule  is: 


Qixi . .  .QhXh-A{vi,  . . .  ,u„),  Rivi . .  .Rkyk-B{v„+i,  . . .  ,Vm) 

I-+  Sizi . . .  Sh+kZh+k- [A9{true)  V  B9{false)] 

where  0  is  a  most-general  unifier  of  ui ,  . . .  ,Vm  and  Qi , . . . ,  Qft,  i2i ,  • .  • ,  Rk,  •S'l,  •  •  •  ?  Sh+k 
are  quantifiers,  under  the  restrictions: 

(i)  The  variables  , . . . ,  ccft,  yi , . . . ,  yjb  are  all  different. 

(ii)  The  sequence  S'lZi . . .  Sh+kZh-\-k  is  a  merge  of  QiXi . . .  QhXh  and  Riyi . . .  RkVk, 
that  is,  Qixi  . . .  QhXh  and  Riyi  . . .  Rkyk  are  subsequences  of  SiZi . . .  Sh+kZh+k- 

(iii)  The  same- world  restriction:  If  the  replaced  occurrences  oivi9,.. Vm9  are  in  the 
scope  of  any  modal  operator  in  A9  or  B9  then  v\9,. . .  ,Vm9  contain  only  rigid 
symbols. 

(iv)  The  replaced  occurrences  of  vi^, . . . ,  Vm9  axe  not  in  the  scope  of  any  quantifier  in 
A9  or  B9. 

(v)  J£{x  i-t)e  9  then  for  some  i,  1  <  i  <  h  +  k,  Si  =  Zi  =  x,  and  no  variable  in  t 
occurs  bound  in  . . .  Sh+kZh+k-{A  V  B) . 


13 


Once  all  the  restricticion  are  checked,  redundant  quantifiers  in  SiZi . . .  Sh+k^h+k  may 
be  discarded. 

Restriction  (iii)  is  necessary  for  modal  logics,  even  at  the  propositional  level.  On  the 
other  hand,  restrictions  (i),  (ii),  (iv),  and  (v)  are  intended  to  solve  classical  logic  prob¬ 
lems;  some  of  them  are  actually  related  to  restrictions  described  by  Manna  and  Waldinger 
([MW3])  for  resolution  with  quantifiers  in  classical  logic.  Restriction  (v)  is  intended  to 
enforce  that  the  application  of  6  does  not  cause  any  capture  of  free  variable,  that  9  only 
instantiates  tmiversally  quantified  variables,  and  that  if  (r  <—  <)  G  0  then  t  does  not  depend 
on  X  implicitly. 

Example:  When  we  apply  the  resolution  rule  to 

3xiVx23x3.(Op(xi,a:2)  V  g(x2,X3)) 

A 

3yiVy2--'9(yi,y2)- 

with 


—  and  R=(Op(xi,X2)  V  y(x2,X3)), 

=  9(yi>y2)  and  V2  =  <ir(x2,X3), 

9=={x2  *-  yi,y2  2:3}, 

restrictions  (i),  (iii),  and  (iv)  are  satisfied. 

To  satisfy  the  remaining  restrictions,  we  choose 

3xi3yiVx23x3Vy2.[-'trtte  V  (Op(a:i,yi)  V  false)] 

as  the  derived  formula.  We  delete  redudant  quantifiers  to  obtain 

3xi3yi.[-'<rue  V  (Op(a:i,yi)  V  false)]. 

Simplification  yields 

3xi3yi.  Op(a;i,yi).  I 


Example:  Whether  the  resolution  rule  is  applicable  or  not  can  be  extremely  sensitive  to 
the  order  of  the  quantifiers  in  the  premises.  For  instance,  suppose  we  change  the  formula 
in  the  previous  example  to 

3xiVx23x3.(Op(a:i,a:2)  V  y(x2,X3)) 

A 

Vy23yi.-'g(yi,y2) 
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and  take 

^  =  “’9(yi»y2)  and  B  =  [<>  p{xi,X2)  V  q{x2,xz)), 

Vi=q{y\,y2)  and  V2=q{x2,xz), 

Bz={x2<^  yi,y2  <-  3:3}. 

Restrictions  (i),  (iii),  and  (iv)  are  still  satisfied,  but  it  is  not  possible  to  satisfy  restrictions 
(ii)  and  (v)  simultaneously.  For  instance,  if  we  derive  the  formula 

3xi\/y23yiWx23x^.[-^true  V  (O p(xi,yi)  V  false)] 

restriction  (v)  is  not  satisfied;  (j/2  *—  X3)  E  0  and  X3  is  bound  in 

Vy23yiVa;23x3.[-i5(yi,y2)  V  {Op{xi,X2)  V  y(x2,a:3))]. 

Other  formulas  we  may  want  to  derive  give  rise  to  similar  restriction  violations.  | 

c.  Merging  the  quantifiers 

The  resolution  rule  does  not  explicitly  specify  the  order  of  SiZi, . . . ,  Sh+k^h+k-  A 
method  for  obtaining  the  sequence  Sizi  . . .  Sh+k^h+k  is  based  on  systematically  merging 
the  sequences  Q\Xi . . .  QhXh  and  Riyi  . . .  RkPk  in  different  ways,  until  one  of  the  results 
satisfies  all  the  restrictions  at  once.  Fortunately,  there  are  less  expensive  implementations. 

For  instance,  the  one  sketched  here  is  based  on  choosing  a  partial  order  for  the  quan¬ 
tifiers  and  then  running  a  topological  sort.  As  a  preliminary  step,  we  check  that  conditions 
(i),  (iii),  and  (iv)  are  satisfied.  Then  we  build  a  directed  graph  with  nodes  labelled  by  the 
quantifiers  from  the  premises  of  the  rule,  that  is,  SiZi, . . . ,  Sh+k^h+k-  There  is  an  edge 
from  SiZi  to  SjZj  if  (zj  <—  t{zi))  E  0  for  some  term  t  or  if  Sjzj  is  in  the  scope  of  SiZi 
in  either  of  the  premises’  quantifier  sequences,  QiXi . . .  QhXh  and  i?iyi . . .  RkPk-  An  edge 
from  SiZi  to  SjZj  can  be  interpreted  as  expressing  that  zj  depends  on  Zi  and  implies  that 
SiZi  should  occur  to  the  left  of  Sjzj  in  the  formula  derived  by  the  rule. 

If  the  graph  is  cyclic,  the  rule  is  not  applicable.  Otherwise,  the  graph  can  be  mapped 
into  a  string  by  a  topological  sort.  The  output  string  is  just  SiZi  . . .  Sh+k^h+k-  When 
arbitrary  choices  are  possible,  it  is  convenient  to  place  3’s  close  to  the  source  (that  is, 
to  the  left  in  SiZi  . . .  Sh+kZh+k)  in  order  to  get  a  stronger  conclusion.  This  construction 
respects  the  original  order  of  the  quantifiers  and  dependencies;  therefore,  restrictions  (ii) 
and  (v)  are  satisfied.  Finally,  redundant  quantifiers  may  be  discarded  in  the  derived 
formula. 

Example:  The  graph  for  the  first  example  above  is 

Bri  — >  \/x2  — >  3a:3 

I  1 

3yi  — ^  Vy2 
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It  can  be  flattened  into  the  string 


3x1 


3yi 


VX2 


3X3 


Vy2.  I 


Example:  The  graph  for  the  second  example  is 


3xi 


VX2 

T 

— »  3X3 

1 

1 

3yi 

i 

< —  Vy2 

The  resolution  rule  is  not  applicable  because  the  graph  is  cyclic.  | 

d.  Resolution  with  flexible  function  symbols 

In  the  presence  of  flexible  function  symbols,  a  new  restriction  on  the  resolution  rule 
is  necessary.  The  following  examples  show  that  the  current  rule  is  not  sound  for  formulas 
with  flexible  function  symbols. 

Example:  Consider  the  formula 

u:  (Vx.-inp(x))  A  □p(a), 

where  a  and  p  are  flexible.  The  formula  u  is  satisfied  by  the  model  M  with  D  =  {0, 1}, 
W  =  {0,1},  Wo  =  0,  R  =  where  a  has  value  0  in  the  real  world  and  1  elsewhere, 
p  holds  for  0  only  in  the  real  world,  and  p  fails  for  1  only  in  the  real  world.  Take  A  = 
->  □p(x),  B  =  Dp(«),  =  Qp(x),  V2  =  Qp(a).  The  most-general  unifier  of  vi  and  V2  is 

6  =  {x  *—  a}.  With  the  restrictions  we  have  presented  so  far,  the  resolution  rule  allows  us 
to  deduce 


(Vx.-'np(x))  A  DpCa)  A  (->truey  false). 

Simplification  yields  false.  According  to  this  proof,  u  is  unsatisfiable.  | 

Example:  Consider  the  formula 

u  :  p{a)  A  DpCa)  A  Vx.(-ip(x)  V  0"’p(®)), 

where  a  and  p  are  flexible.  The  model  M  described  in  the  previous  example  satisfies  u. 
Take  A  =  (-'p(x)  V  O  -ip(x)),  B  =  p(a),  =  p(a^),  ^2  =  p{o).  The  most-general  classical 

unifier  of  vi  and  t>2  is  ^  =  {x  <—  a}.  With  the  restrictions  we  have  presented  so  fax,  the 
resolution  rule  allows  us  to  deduce 

p(a)  A  DpCa)  A  Vx.(->p(x)  V  0-'p{x))  A  [(->trueV  O  “'p(a))  V  false]. 
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Simplification  yields 

□  p(a)  A  O  -’p(a), 

a  clearly  provably  unsatisfiable  formula.  According  to  this  proof,  then,  u  is  unsatisfiable. 

I 

Unification  in  the  scope  of  modal  operators  and  substitution  into  the  scope  of  modal 
operators  give  rise  to  incorrect  derivations  in  these  examples.  The  basic  problem  is  sim¬ 
ply  that  equals  cannot  be  substituted  for  equals  in  modal  logics.  The  resolution  rule  is 
restricted  further  in  order  to  avoid  this  problem: 

(vi)  If  (s  <—  <)  €  ^  and  a  flexible  symbol  occurs  in  t  then  x  does  not  occur  in  the 
scope  of  any  modal  operator  in  either  A  or  B. 

e.  Soundness  of  resolution 

The  restrictions  presented  in  the  last  two  subsections  are  actually  sufficient  to  guar¬ 
antee  the  soundness  of  the  resolution  rule.  We  first  show: 

Lemma  (Soundness  of  instantiation): 

Given  the  substitution  9,  the  quantifiers  Ti, . . .  ,Tjf,  and  v  =  TiWi . . .  TfWe.u,  and 
v'  =  TiWi . . .  Tewe-uO,  such  that 

if  (a:  4-  t)  G  ^  then  for  some  i,  1  <i  <  £,Ti  =  \/,Wi  =  x,  and  no  variable 
in  t  occurs  bound  in  \/xTi+iWi+i . . .  Tewe.u, 

if  (r  4—  t)  G  ^  and  t  contains  flexible  symbols  then  x  does  not  occur  in 
the  scope  of  any  modal  operator  in  u, 

then  u  «— 4  u'. 

Theorem:  The  resolution  rule,  with  restrictions  (i),  (ii),  (iii),  (iv),  (v),  and  (vi),  is  sound. 

Proof  sketch:  It  sufiices  to  show  that  the  premises  entail  the  conclusion,  that  is, 

Qixi...QhXh-A{vi,  ...,Vn)  A  Riyi...Rkyk-B{vn+i  9  •  •  •  ) ^m) 

^  Sizi...  Sh+kZh+k- [A6{true)  V  B0{false)] . 

Assume  the  premises  Qi®i  — QhXh-A  and  Riyi  . . .  Rkyk-B  hold.  Conditions  (i)  and  (ii) 
guarantee  that  the  (sound)  quantifier  rules  allow  us  to  derive  Sizi . . .  Sh+kZh+k-{A  A  B). 
This  formula  and  9  fulfill  the  hypotheses  of  the  lemma  by  conditions  (v)  and  (vi).  There¬ 
fore,  we  can  derive  . . .  Sh+k^h+k-{A  A  B)9,  that  is,  . . .  Sh+k^h+k-i-^^  A  B9).  (At 
this  point  redundant  quantifiers  can  be  deleted  from  the  conclusion  without  harm.) 


We  have  shown  that 

Qixi . . .  QhXh-A  A  Riyi . . .  Rkyk-B 

‘ >  S%Zi  ...  Sh-{-k^h+k'  (A^(w1  ,  .  .  .  ,  A  B9(^Vfi^\ ,  .  .  .  ,  Um))  • 
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It  suffices  to  show  that 


iSiZi  .  .  .  A  ...,Vni)) 

S\Z\  . . .  Sh+kZh+k- [A9{true)  V  B9{false)] . 

This  can  be  proved  by  purely  propositional  modal  reasoning:  by  the  monotonicity  of 
entailment  lemma,  it  suffices  to  show  that 

[A9{vi,  . . .  ,Vn)  A  B9{vn+1,  . . .  ,Vm))  [A9{true)  V  B9{false)]. 

The  formulas  A9  and  B9  have  some  subformulas  in  common,  since  v\9  =  . . .  =  Vm9.  Let 
v9  denote  ujl?, . . . ,  Vm9.  Consider  occurrences  of  v9  not  in  the  scope  of  any  quantifier  and, 
if  v9  contains  any  fiexible  symbols,  not  in  the  scope  of  any  modal  operator.  Assume  that 
A9{v\,  . . .  ,Vn)  and  B9{vn-\-i,  .  • .  ,Vm)  hold.  If  v9  is  true  then  A9{true)  holds;  otherwise, 
B9{false)  holds.  In  either  case,  A9{true)  V  B9{false)  holds,  as  we  wanted  to  show.  | 

8.  AN  EXAMPLE 

We  prove  that 

□(Vx.p(a;))  D  (V®.  □p(a:)) 

in  the  resolution  system  for  K.  We  will  derive  false  from 
5o  :  -[-□(Va:.p(®))  V  (V®.  □  p(a:))] . 

By  the  negation  rules,  we  first  get 

Q(Vx.p(x))  A  (3x.  O  “'p(a:))- 
The  rule  for  moving  quantifiers  of  existential  force  yields 
3x'.p(Vx.p(x))  A  O-p(x')]. 

The  modality  rule  in  the  system  for  K  yields 

3x'.[n(Vx.p(x))  A  O-'p(x')  A  0((Vx.p(x))  A  -'p(x'))]. 

Weakening  reduces  this  sentence  to 

3x'.  0[(Vx.p(x))  A  -ip(x')]. 

Take  A  =  -’p(x'),  B  =  p(x),  vi  =  p(x'),  V2  =  p(x).  Resolution  yields 
3x'.  0[(Vx.p(x))  A  “'p(x')  A  {->truey  false)]. 
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true- false  simplifications  yield  false. 


9.  COMPLETENESS  FOR  FIRST-ORDER  SYSTEMS 


Our  propositional  modal  resolution  systems  together  with  the  quantifier  rules,  the 
auxiliary  rules,  and  the  resolution  rule  for  the  first-order  language  with  flexible  function 
symbols,  constitute  first-order  resolution  systems.  Skolemization  rules  may  be  added,  but 
are  not  essential. 

Theorem:  The  first-order  resolution  systems  for  K,  T,  K4,  S4,  S5,  D,  and  D4  are  complete 
for  the  corresponding  classes  of  models. 

Proof  sketch:  Some  Hilbert  systems  are  known  to  be  complete  for  these  logics,  at  least 
for  the  language  with  no  rigid  symbols  and  no  function  symbols  (e.g.,  [HC],  [Fil]).  We 
can  extend  these  completeness  results  to  the  language  with  rigid  symbols  and  function 
symbols.  Then  we  show  that  each  of  the  resolution  systems  is  at  least  as  powerful  as 
one  such  complete  Hilbert  system.  Specifically,  we  show  that  any  Hilbert  proof  can  be 
transformed  into  a  resolution  proof,  by  induction  on  the  structure  of  Hilbert  proofs.  | 

Remark:  We  will  not  discuss  completeness  issues  for  first-order  G.  Several  notions  of 
completeness  have  been  proposed  for  this  logic  and  none  of  those  based  on  Kripke  models 
seems  fully  satisfactory  ([Fi2]). 
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